在Quarkus中使用@RolesAllowed进行自定义JWT验证，而不使用smallrye-jwt

<dependency>
    <groupId>io.quarkus</groupId>
    <artifactId>quarkus-smallrye-jwt</artifactId>
</dependency>

import javax.annotation.security.RolesAllowed;
import javax.ws.rs.GET;
import javax.ws.rs.Path;
import javax.ws.rs.core.Response;

@Path("/api")
public class MyResource {

    @GET
    @Path("/secured")
    @RolesAllowed("admin")
    public Response securedEndpoint() {
        // 处理受保护的逻辑
        return Response.ok("Secured endpoint").build();
    }
}

import io.quarkus.smallrye.jwt.runtime.auth.JWTAuthMechanism;
import io.smallrye.jwt.auth.principal.JWTCallerPrincipal;
import org.eclipse.microprofile.jwt.JsonWebToken;

import javax.enterprise.context.ApplicationScoped;
import javax.inject.Inject;
import javax.ws.rs.core.SecurityContext;

@ApplicationScoped
public class CustomJWTAuthMechanism implements JWTAuthMechanism {

    @Inject
    JsonWebToken jwt;

    @Override
    public void validateToken(SecurityContext securityContext) {
        if (jwt == null || !jwt.getGroups().contains("admin")) {
            throw new SecurityException("Unauthorized");
        }
    }
}

quarkus.smallrye-jwt.enabled=false
quarkus.jwt.sign.key.location=privateKey.pem
quarkus.jwt.verify.key.location=publicKey.pem
quarkus.jwt.issuer=my-issuer
quarkus.jwt.audience=my-audience